Lucene search
RedHatRHSA-2016:1384HistoryJul 05, 2016 - 8:09 p.m.
(RHSA-2016:1384) Moderate: ceph security update
2016-07-0520:09:03
access.redhat.com
37
EPSS
0.018
Percentile
88.2%
Red Hat Ceph Storage is a massively scalable, open, software-defined
storage platform that combines the most stable version of Ceph with a Ceph
management platform, deployment tools, and support services.
A flaw was found in the way handle_command() function would validate prefix value from user. An authenticated attacker could send a specially crafted prefix value resulting in ceph monitor crash.(CVE-2016-5009)
Upstream acknowledges Xiaoxi Chen as the original reporter of CVE-2016-5009.
All ceph users are advised to upgrade to this updated package, which
contains backported patches to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | python-rbd | < 0.94.5-14.el7cp | python-rbd-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-test | < 0.94.5-14.el7cp | ceph-test-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | src | ceph | < 0.94.5-14.el7cp | ceph-0.94.5-14.el7cp.src.rpm |
| RedHat | 7 | x86_64 | librbd1-devel | < 0.94.5-14.el7cp | librbd1-devel-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-debuginfo | < 0.94.5-14.el7cp | ceph-debuginfo-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librbd1 | < 0.94.5-14.el7cp | librbd1-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-radosgw | < 0.94.5-14.el7cp | ceph-radosgw-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-common | < 0.94.5-14.el7cp | ceph-common-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | librados2 | < 0.94.5-14.el7cp | librados2-0.94.5-14.el7cp.x86_64.rpm |
| RedHat | 7 | x86_64 | ceph-mon | < 0.94.5-14.el7cp | ceph-mon-0.94.5-14.el7cp.x86_64.rpm |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:0367-1)
2021-04-19 00:00:00
Ubuntu: Security Advisory (USN-3452-1)
2017-10-12 00:00:00
redhatcve
redhatcve
CVE-2016-5009
2016-06-30 06:49:06
nessus
nessus
RHEL 7 : ceph (RHSA-2016:1384)
2018-08-29 00:00:00
SUSE SLED12 / SLES12 Security Update : ceph (SUSE-SU-2017:0367-1)
2017-02-03 00:00:00
openSUSE Security Update : ceph (openSUSE-2016-1500)
2016-12-21 00:00:00
ubuntucve
ubuntucve
CVE-2016-5009
2016-07-12 00:00:00
nvd
nvd
CVE-2016-5009
2016-07-12 19:59:06
prion
prion
Command injection
2016-07-12 19:59:00
redhat
redhat
(RHSA-2016:1385) Moderate: ceph security update
2016-07-05 20:54:05
cvelist
cvelist
CVE-2016-5009
2016-07-12 19:00:00
debiancve
debiancve
CVE-2016-5009
2016-07-12 19:59:06
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:12:20
cve
cve
CVE-2016-5009
2016-07-12 19:59:06
ubuntu
ubuntu
Ceph vulnerabilities
2017-10-11 00:00:00